$ rpki-client -vvf repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft File: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft (raw, json) Hash identifier: OQM3r9piYW1pR4l9N3AWixduWjx39b/0Iu5RF3ghqR4= Subject key identifier: 85:70:50:0B:A1:12:E5:74:FC:6D:01:BF:A5:D7:51:E5:2E:A2:FD:7D Authority key identifier: D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 Certificate issuer: /CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Certificate serial: 789CE98EC4ECDE5514F188EB4B9500DA06BFE0B5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft Manifest number: 67 Signing time: Sun 16 Feb 2025 03:21:41 +0000 Manifest this update: Sun 16 Feb 2025 03:16:41 +0000 Manifest next update: Wed 19 Feb 2025 05:19:41 +0000 Files and hashes: 1: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: Hz/P540tQCAD7Joj9Cnl8/Cvk9mtd9SX29+QidTIXjo=) 2: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl (hash: G03ao9HF2K49eKGSxKwGFuo850EElWc+mHk5Fzx+Avw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Feb 2025 05:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:9c:e9:8e:c4:ec:de:55:14:f1:88:eb:4b:95:00:da:06:bf:e0:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Validity Not Before: Feb 16 03:16:41 2025 GMT Not After : Feb 19 05:19:41 2025 GMT Subject: CN=8570500BA112E574FC6D01BFA5D751E52EA2FD7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ed:96:1b:b7:cc:b4:f4:77:fa:4c:d5:8e:67: 82:08:87:10:70:4f:cc:dc:20:ec:14:be:5d:98:02: b8:8e:22:c2:38:68:12:69:cc:d0:bc:79:7c:34:a4: 20:7b:09:c1:fc:7b:49:c0:14:6e:d8:98:c3:3d:6f: 13:40:93:d6:80:1d:ff:c9:9c:91:0e:de:8e:44:20: d3:4d:21:5b:df:93:28:1a:ad:1d:00:3c:f2:69:19: 01:42:61:1e:63:41:d5:7f:ae:38:e5:44:2a:0c:2e: 65:39:dd:1e:16:b6:60:eb:85:71:58:ec:ac:91:21: 69:90:ff:d2:bb:b5:f2:47:61:be:b1:f3:a1:49:c0: df:c8:cf:28:1c:4b:89:58:28:2b:d7:b6:15:45:d5: 56:63:33:4e:0c:fd:b6:f7:d8:a0:5f:1f:3d:d7:df: e7:54:89:33:dc:52:e6:f6:42:ac:32:be:68:d9:fa: 32:41:ee:76:b1:49:5d:bb:b2:cf:eb:2b:6a:39:b8: 2a:3c:91:25:a4:b0:65:dd:49:37:59:f9:f9:96:07: 9c:6e:6c:64:a7:f8:d7:22:dd:c1:58:29:83:3b:a5: df:46:ab:dc:07:5d:66:ce:e8:ff:0f:5f:62:67:49: ce:8c:20:f6:51:6c:2e:3b:55:d7:59:e2:9f:a4:25: b3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:70:50:0B:A1:12:E5:74:FC:6D:01:BF:A5:D7:51:E5:2E:A2:FD:7D X509v3 Authority Key Identifier: keyid:D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:e0:84:12:02:42:7e:49:24:53:aa:76:f2:76:66:4a:46:6c: df:e5:65:43:f2:c9:06:a9:04:fc:4c:3e:c8:ca:02:dd:ec:dd: cb:6e:17:e2:61:ee:ac:bf:20:cd:f0:f6:a4:4c:0e:81:88:c6: 99:71:e8:d2:d7:36:38:0c:d8:03:5f:ee:dc:ac:38:aa:b1:9a: 3a:57:64:e8:45:45:46:49:ab:72:6c:14:15:d4:be:25:0e:f4: cf:e0:5e:32:c3:2f:47:a0:dc:0e:32:f4:c0:ab:87:40:4c:70: 37:c8:a1:09:79:ba:e7:d5:27:20:c7:ba:a3:0f:6c:28:dd:71: d8:76:d4:7f:63:de:64:7c:40:0d:10:6d:b3:13:fe:dc:59:be: da:fd:23:45:b9:1a:44:64:59:18:d9:3c:aa:2f:64:1b:70:91: 22:6a:e9:eb:26:34:2b:b4:0b:5f:fd:21:7a:65:a2:25:01:54: 61:1c:0b:59:92:3c:82:12:b3:8b:37:80:a3:16:cd:9b:54:90: 14:0d:6b:14:d7:30:7a:e0:98:bd:33:00:b0:67:26:ce:04:19: 68:5d:47:09:b0:0e:6a:c7:25:df:30:a6:11:a7:1f:7b:df:9d: 4b:a3:e1:12:0c:e6:49:47:f2:fb:98:ff:c1:0d:64:a2:52:4a: 5d:12:29:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeJzpjsTs3lUU8YjrS5UA2ga/4LUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFF RDRCNUY4NTAeFw0yNTAyMTYwMzE2NDFaFw0yNTAyMTkwNTE5NDFaMDMxMTAvBgNV BAMTKDg1NzA1MDBCQTExMkU1NzRGQzZEMDFCRkE1RDc1MUU1MkVBMkZEN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO7ZYbt8y09Hf6TNWOZ4IIhxBw T8zcIOwUvl2YAriOIsI4aBJpzNC8eXw0pCB7CcH8e0nAFG7YmMM9bxNAk9aAHf/J nJEO3o5EINNNIVvfkygarR0APPJpGQFCYR5jQdV/rjjlRCoMLmU53R4WtmDrhXFY 7KyRIWmQ/9K7tfJHYb6x86FJwN/IzygcS4lYKCvXthVF1VZjM04M/bb32KBfHz3X 3+dUiTPcUub2QqwyvmjZ+jJB7naxSV27ss/rK2o5uCo8kSWksGXdSTdZ+fmWB5xu bGSn+Nci3cFYKYM7pd9Gq9wHXWbO6P8PX2JnSc6MIPZRbC47VddZ4p+kJbNnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhXBQC6ES5XT8bQG/pddR5S6i/X0wHwYDVR0j BBgwFoAU0N1UBHgavuPPanStqOk/Qe1LX4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTJiZjg2My1hMWYwLTQyZDAtOWUzYS0zZjlmZjY5YTJkMTUvMC9EMERENTQwNDc4 MUFCRUUzQ0Y2QTc0QURBOEU5M0Y0MUVENEI1Rjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFFRDRC NUY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNG NDFFRDRCNUY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjghBICQn5JJFOqdvJ2ZkpGbN/lZUPyyQap BPxMPsjKAt3s3ctuF+Jh7qy/IM3w9qRMDoGIxplx6NLXNjgM2ANf7tysOKqxmjpX ZOhFRUZJq3JsFBXUviUO9M/gXjLDL0eg3A4y9MCrh0BMcDfIoQl5uufVJyDHuqMP bCjdcdh21H9j3mR8QA0QbbMT/txZvtr9I0W5GkRkWRjZPKovZBtwkSJq6esmNCu0 C1/9IXploiUBVGEcC1mSPIISs4s3gKMWzZtUkBQNaxTXMHrgmL0zALBnJs4EGWhd RwmwDmrHJd8wphGnH3vfnUuj4RIM5klH8vuY/8ENZKJSSl0SKco= -----END CERTIFICATE-----Generated at Sun Feb 16 21:02:55 2025 by rpki-client